diff --git a/docs/en/ingest-management/release-notes/release-notes-8.16.asciidoc b/docs/en/ingest-management/release-notes/release-notes-8.16.asciidoc index 56347d91c..a05983ffd 100644 --- a/docs/en/ingest-management/release-notes/release-notes-8.16.asciidoc +++ b/docs/en/ingest-management/release-notes/release-notes-8.16.asciidoc @@ -30,6 +30,34 @@ Also see: Review important information about the {fleet} and {agent} 8.16.2 release. +[discrete] +[[known-issues-8.16.2]] +=== Known Issues + +[discrete] +[[known-issue-6213-8-16-2]] +.An {agent} with the Defend integration may report an Orphaned status and will not be able to be issued an upgrade action through {fleet}. +[%collapsible] +==== +*Details* + +A known issue in the {agent} may prevent it from being targetted with an upgrade action for a future release. +This may occur if the Defend integration is used and the agent is stopped on a running instance for too long. +An agent may be stopped as part of an upgrade process. + +*Impact* + +A bug fix is present in the 8.16.3 and 8.17.1 releases of {fleet} that will prevent this from occuring. + +If you have agents that are affected, the workaround is as follows: +[source,shell] +---- +# Get a Token to issue an update_by_query request: +curl -XPOST --user elastic:${SUPERUSER_PASS} -H 'x-elastic-product-origin:fleet' -H'content-type:application/json' "https://${ELASTICSEARCH_HOST}/_security/service/elastic/fleet-server/credential/token/fix-unenrolled" + +# Issue an update_by_query request that targets effected agents: +curl -XPOST -H 'Authorization: Bearer ${TOKEN}' -H 'x-elastic-product-origin:fleet' -H 'content-type:application/json' "https://${ELASTICSEARCH_HOST}/.fleet-agents/_update_by_query" -d '{"query": {"bool": {"must": [{ "exists": { "field": "unenrolled_at" } }],"must_not": [{ "term": { "active": "false" } }]}},"script": {"source": "ctx._source.unenrolled_at = null;","lang": "painless"}}' +---- +==== + [discrete] [[enhancements-8.16.2]] === Enhancements @@ -51,6 +79,34 @@ In this release we've introduced an image based on the hardened link:https://git Review important information about the {fleet} and {agent} 8.16.1 release. +[discrete] +[[known-issues-8.16.1]] +=== Known Issues + +[discrete] +[[known-issue-6213-8-16-1]] +.An {agent} with the Defend integration may report an Orphaned status and will not be able to be issued an upgrade action through {fleet}. +[%collapsible] +==== +*Details* + +A known issue in the {agent} may prevent it from being targetted with an upgrade action for a future release. +This may occur if the Defend integration is used and the agent is stopped on a running instance for too long. +An agent may be stopped as part of an upgrade process. + +*Impact* + +A bug fix is present in the 8.16.3 and 8.17.1 releases of the {fleet} that will prevent this from occuring. + +If you have agents that are affected, the workaround is as follows: +[source,shell] +---- +# Get a Token to issue an update_by_query request: +curl -XPOST --user elastic:${SUPERUSER_PASS} -H 'x-elastic-product-origin:fleet' -H'content-type:application/json' "https://${ELASTICSEARCH_HOST}/_security/service/elastic/fleet-server/credential/token/fix-unenrolled" + +# Issue an update_by_query request that targets effected agents: +curl -XPOST -H 'Authorization: Bearer ${TOKEN}' -H 'x-elastic-product-origin:fleet' -H 'content-type:application/json' "https://${ELASTICSEARCH_HOST}/.fleet-agents/_update_by_query" -d '{"query": {"bool": {"must": [{ "exists": { "field": "unenrolled_at" } }],"must_not": [{ "term": { "active": "false" } }]}},"script": {"source": "ctx._source.unenrolled_at = null;","lang": "painless"}}' +---- +==== + [discrete] [[bug-fixes-8.16.1]] === Bug fixes @@ -104,7 +160,7 @@ This error can happen if the {agents} being searched and listed in the UI are us *Impact* + -As a workaround for the issue, you can upgrade your {stack} to verion 8.16.1. The issue has been resolved by {kib} link:https://github.com/elastic/kibana/pull/199325[#199325]. +As a workaround for the issue, you can upgrade your {stack} to verion 8.16.1. The issue has been resolved by {kib} link:https://github.com/elastic/kibana/pull/199325[#199325]. ==== @@ -154,6 +210,30 @@ As a workaround, we recommend trying again to uninstall the agent. ==== +[discrete] +[[known-issue-6213-8-16-0]] +.An {agent} with the Defend integration may report an Orphaned status and will not be able to be issued an upgrade action through {fleet}. +[%collapsible] +==== +*Details* + +A known issue in the {agent} may prevent it from being targetted with an upgrade action for a future release. +This may occur if the Defend integration is used and the agent is stopped on a running instance for too long. +An agent may be stopped as part of an upgrade process. + +*Impact* + +A bug fix is present in the 8.16.3 and 8.17.1 releases of {fleet} that will prevent this from occuring. + +If you have agents that are affected, the workaround is as follows: +[source,shell] +---- +# Get a Token to issue an update_by_query request: +curl -XPOST --user elastic:${SUPERUSER_PASS} -H 'x-elastic-product-origin:fleet' -H'content-type:application/json' "https://${ELASTICSEARCH_HOST}/_security/service/elastic/fleet-server/credential/token/fix-unenrolled" + +# Issue an update_by_query request that targets effected agents: +curl -XPOST -H 'Authorization: Bearer ${TOKEN}' -H 'x-elastic-product-origin:fleet' -H 'content-type:application/json' "https://${ELASTICSEARCH_HOST}/.fleet-agents/_update_by_query" -d '{"query": {"bool": {"must": [{ "exists": { "field": "unenrolled_at" } }],"must_not": [{ "term": { "active": "false" } }]}},"script": {"source": "ctx._source.unenrolled_at = null;","lang": "painless"}}' +---- +==== + [discrete] [[new-features-8.16.0]] === New features @@ -172,7 +252,7 @@ The 8.16.0 release Added the following new and notable features. {fleet-server}:: * Add `/api/fleet/agents/:id/audit/unenroll` API that an {agent} or Endpoint process may use to report that an agent was uninstalled or unenrolled to {fleet}. {fleet-server-pull}3818[#3818] {agent-issue}484[#484] -* Add a `secret_paths` attribute to the policy data sent to agents. This attribute is a list of keys that {fleet-server} has replaced with a reference to a secret value. {fleet-server-pull}3908[#3908] {fleet-server-issue}3657[#3657] +* Add a `secret_paths` attribute to the policy data sent to agents. This attribute is a list of keys that {fleet-server} has replaced with a reference to a secret value. {fleet-server-pull}3908[#3908] {fleet-server-issue}3657[#3657] {agent}:: * Uninstalling a {fleet}-managed {agent} instance will now do a best-effort attempt to notify {fleet-server} of the agent removal so the agent status appears correctly in the {fleet} UI (related to {fleet-server-pull}3818[#3818] above). {agent-pull}5302[#5302] {agent-issue}484[#484]